auth.php

<?php

use \lithium\security\Auth;
use \lithium\util\String;

Auth::config(array(   
    'account' => array( 
        'adapter' => 'Form',
        'model'   => 'Account',
        'fields'  => array('login'),
    )
));

Auth::applyFilter('check', function($this, $params, $chain) {
    $user = $chain->next($this, $params, $chain);
    $data = $params['credentials']->data;

    if (!$user) {
        return false;
    }

    $hashed = String::hash($data['password'], 'sha1', $user['salt']);

    if ($hashed != $user['password']) {
        return false;
    }

    return $user;
});

?>